I have exported everything from the old FMC 3500 into a new FMC 4500, but not all of the network objects made it. There seems to be 2 pages of network objects missing. Instead of comparing the 2 FMC's line for line, I would like a command line option...
Hi Folks ... i am having issue with NGIPS which is managed by FMC . I just want to see all the ip address blacklisted by NGIPS ? In event i have just performed extended search option but not able to find any block ip address . Please help I want cons...
I am looking into replacing a current, clientless SSL VPN; however, there are some parameters that this device (solution) must be able to exceed, or moving forward with Cisco would not be an option. Parameters to succeed: - URL-specific granularity ...
Hi folks!We have purchased a used Cisco PIX 515E firewall that I am trying to configure. It was originally password protected, but I have used the password reset utility supplied by Cisco to clear the password and have formatted the flash. I am n...
Hi All, Can we apply 2 different Qos rules for the same flow. One on the ingress interface and other on the egress interface. I need to limit one drive traffic to X mbps and out of that each user should be limited to Y mbps.
Hello. We have now two asa 5525 in a ha active/pasive cluster. We are using 2 gigabit interfaces forming an etherchannel for the data traffic, 1 interface for the failover traffic and the management 0/0 interface for the firewall management. Now we h...
Hello I want to confirm if this deployment would work or not. We would have a asa firewall (external) conected to the internet router. The link between the internet routers and the asa would use a public ip address range. And another asa (vpn) con...
Hi, I am trying to get the AnyConnet VPN client device's hostname in ISE. DHCP profiling probe is enabled on ISE and works for LAN devices. AnyConnect is 4.6 version. The headend firewall is FTD 2110, 6.2.3. ISE is running 2.4 patch 5. The VPN...
I have Cisco ASA 5510 that we are looking to replace. We would like to replace it with another Cisco Appliance. My Question is 2 parts. Part 1 I am not extremely familiar with the Cisco line of products. The main requirements are VPN and we have 2 ...
How are you handling service allowance where wildcard domains are the only firewall configuration provided? Specifically I am looking at a server that needs access to Microsoft PowerBI services. I have attached the documentation provided by Microso...
Hello unable to access internet, packet tracer from inside to STC shows that packets allowed but still can not access internet. hereinafter ASA configuration. ISP router connected to interface 0/2. interface GigabitEthernet0/0 description ** LAN I...
Hi Community, I am stuck in here as, VPN is successfully established between DC & Site1 but traffic (icmp or any other) is not flowing. Kindly help. Below are the two site IKV1 configuration. Site 1: object-group network Datacenter_nwnetwork-object 1...
hi, Anyone know if there's a official hardening guide for Cisco Firepower 4100 series platform ? I only manage to find guide for ASA Firewall http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/200150-Cisco-...
12 years as a firewall guy... and this is a first for me.I have a request to allow firewall access to an app that apparently uses tcp port 0. I thought it didn't exist... but good-ol' google proved that wrong. I did find this comment: " Port 0 is ...
I have 2 FTD 2120 Firewall with HA. I manage these by FMC. I need to port forward to my web server IP. For example: In my Firewall WAN there is IP Gi 0/1: 1.1.1.1 & 1.1.1.2. Routable Public IP Gi 0/2: 2.2.2.1/29 LAN IP Gi 0/3 : 10.10.10.10 Can anyo...
